last executing test programs: 6.045144354s ago: executing program 1 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r2, 0x99b33000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 5.955560295s ago: executing program 1 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x364, &(0x7f0000002400)={{0x12, 0x1, 0x310, 0x40, 0x70, 0xbc, 0x20, 0x4ce, 0x300, 0xf9a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x352, 0x2, 0x5, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0x36, 0x80, 0x2, 0xc9, 0xf1, 0xa3, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0xa800, 0xad}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x6, 0x81, "dbc68f4861d8"}]}], [{{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x5e, 0xff, 0x3, [@generic={0x73, 0x0, "fb6b6d0e9cb7ead240eba60d68a6aef05334916dc8c498a498a007035c1c3a30f66c34863c24cef8c166db778870aeb887f22cf82b31abccf81ad325dc8eb33aade255388d9745fbb52a9ba96c389558ae19bff3364e0a676d5b4fff3ad375d98bc0dd8c237d6c756675962da8e6296feb"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x9, 0x0, 0x0, [@generic={0xb5, 0x24, "6728f57cafcea3cdb22b4571833af26b9cc6c730ff3fd7750566663acbf13f998ecdbbe8b340c4936498ca2e80a8276b5bd9024847b795a1d56d51a4b9e3e41b8dfba12ccd6929e2f59dd19dfbf0be11120b9153ddc0983fc7c9c2ea67d140901624cda3d3d22fd76683c1819e6ab527f26ab1ecf1bfe59cceae31977e9ea2d56328d7fd3c6800daee52646e47efffc5d10015e8e006db6fb2b20ad96d3f8674c97cd8e7fa6a3114444d13f82cc5fd6c76e088"}, @generic={0x70, 0x22, "0bf15dbb72940670c2aed93022668d9145c0b603342de55d184d9dd7c626541407ad45e39f31fb11bf633ec07d20ecb873fc72979100c8f5639d845f3c1c1d2da9ce76204ee042695b6a73492259ec2b8b221f2b0d22a6a8b516dc96b62988b24c6227262fd8e272fecb0b0debdc"}]}}]}}, {{0x9, 0x4, 0xe9, 0xc, 0x7, 0x3, 0xf9, 0xa7, 0xe8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x8}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1c, 0x1, "f6"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x1}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f8d1"}, {0x5, 0x24, 0x0, 0xb10c}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfe2b, 0x1, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0xfff0, 0x2, 0x7f, 0x8, 0x7f, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0xac, 0x9, 0x4cc}]}], [{{0x9, 0x5, 0x80, 0x2, 0x200, 0x6, 0x2, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x12, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x8d, 0xd5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x1, 0x2, 0x5, [@generic={0xbc, 0x30, "a9423dae760fe1b213d1118bd2d39f8d4101f8be9866fd99faa37a09162801eed2ee3fcedabb984254d85dded2e56d3fae52293275f238856e879ef5f0cda80d72eb8432e1fb78d24b3f3a048f43d3dce2fe3d69138245ec1fbb6379ce1dd22e7fd0f16d3176280913b24d4d9ceeae656bf7196cc501f62e88145e332f70da5c576800f3bd48a00cab69941a23e6fe3bb3503bc5158bd5f0e09dcfa26cbb591cdd35f9126c0c4ec6a2828e9b1ad1a74f968d16d660a4bbf6d5bd"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x3, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x16, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xe, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2b0}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x6, 0xfb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x401}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xcd, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x74, 0xf, 0x4, 0xff, 0x10}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x8}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80a}}]}) (async) r2 = syz_usb_connect(0x1, 0x364, &(0x7f0000002400)={{0x12, 0x1, 0x310, 0x40, 0x70, 0xbc, 0x20, 0x4ce, 0x300, 0xf9a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x352, 0x2, 0x5, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0x36, 0x80, 0x2, 0xc9, 0xf1, 0xa3, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0xa800, 0xad}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x6, 0x81, "dbc68f4861d8"}]}], [{{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x5e, 0xff, 0x3, [@generic={0x73, 0x0, "fb6b6d0e9cb7ead240eba60d68a6aef05334916dc8c498a498a007035c1c3a30f66c34863c24cef8c166db778870aeb887f22cf82b31abccf81ad325dc8eb33aade255388d9745fbb52a9ba96c389558ae19bff3364e0a676d5b4fff3ad375d98bc0dd8c237d6c756675962da8e6296feb"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x9, 0x0, 0x0, [@generic={0xb5, 0x24, "6728f57cafcea3cdb22b4571833af26b9cc6c730ff3fd7750566663acbf13f998ecdbbe8b340c4936498ca2e80a8276b5bd9024847b795a1d56d51a4b9e3e41b8dfba12ccd6929e2f59dd19dfbf0be11120b9153ddc0983fc7c9c2ea67d140901624cda3d3d22fd76683c1819e6ab527f26ab1ecf1bfe59cceae31977e9ea2d56328d7fd3c6800daee52646e47efffc5d10015e8e006db6fb2b20ad96d3f8674c97cd8e7fa6a3114444d13f82cc5fd6c76e088"}, @generic={0x70, 0x22, "0bf15dbb72940670c2aed93022668d9145c0b603342de55d184d9dd7c626541407ad45e39f31fb11bf633ec07d20ecb873fc72979100c8f5639d845f3c1c1d2da9ce76204ee042695b6a73492259ec2b8b221f2b0d22a6a8b516dc96b62988b24c6227262fd8e272fecb0b0debdc"}]}}]}}, {{0x9, 0x4, 0xe9, 0xc, 0x7, 0x3, 0xf9, 0xa7, 0xe8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x8}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1c, 0x1, "f6"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x1}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f8d1"}, {0x5, 0x24, 0x0, 0xb10c}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfe2b, 0x1, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0xfff0, 0x2, 0x7f, 0x8, 0x7f, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0xac, 0x9, 0x4cc}]}], [{{0x9, 0x5, 0x80, 0x2, 0x200, 0x6, 0x2, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x12, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x8d, 0xd5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x1, 0x2, 0x5, [@generic={0xbc, 0x30, "a9423dae760fe1b213d1118bd2d39f8d4101f8be9866fd99faa37a09162801eed2ee3fcedabb984254d85dded2e56d3fae52293275f238856e879ef5f0cda80d72eb8432e1fb78d24b3f3a048f43d3dce2fe3d69138245ec1fbb6379ce1dd22e7fd0f16d3176280913b24d4d9ceeae656bf7196cc501f62e88145e332f70da5c576800f3bd48a00cab69941a23e6fe3bb3503bc5158bd5f0e09dcfa26cbb591cdd35f9126c0c4ec6a2828e9b1ad1a74f968d16d660a4bbf6d5bd"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x3, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x16, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xe, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2b0}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x6, 0xfb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x401}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xcd, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x74, 0xf, 0x4, 0xff, 0x10}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x8}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x21, 0xe0, {0xe0, 0x5, "876278aea6e22fa7fe12a00d99d2c9ea5b07cc991a24e43bd4e3e78b3f337ad687af25dccff2cc485c7cf048bc87c29b53986c2fe168f5693fd8c7c579f388070adffb610e402d8ac2babe8d95a9c6a5ed1451de5885cb26e79601ba2e1ab2bc4b86d43e8abb7809183bf2690ec3db5cd12ce17784818e55a73662c275695ac21d69d5ebeb161ab7c910b86f2caae16f1132498e51f924cb4582f43743b39b6bbb551005a2bb12bc650fe94f755e3e739f2da44efa9ea8e9186f5b0fa5117e6aec94ceded63c0d73ef98cf18bd366dd0cf5310ad22926a4bc26f8c37568f"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000002a40)={0x44, &(0x7f0000002780)={0x20, 0xf, 0xf4, "d167067ea36c16fc0960b8300c7a32eaca60fd640b924a0cdd3f9ac6665ce0c9c7ba123a1bca6412c7a06bdc903f78bc737e020e91be70d210250f4dc5a9a4c8b53b2ded718c2979a6135cd0ee93bf8806721136b9c16f513a66d8463ea4ee51a15a18b539a23d83218831c954940c52ed4e926186d1b949d876eee3f6e7d5a622c11889826098fd9299b240ccca18980763082f404a573bba9c843af2a1661ef2371420b7406e79bdaabdbbc881ccbe01b8e11aa906ff33be5c368c212c3dd2b9317954795e5b7748ae258cdc3f9cac093f3b571d64e3d30999862e63a0a46bfb9de5bb24f29ae672a5be96b37882482e2539e0"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002900)={0x20, 0x81, 0x3, "f65aa9"}, &(0x7f0000002940)={0x20, 0x82, 0x3, "b5e148"}, &(0x7f0000002980)={0x20, 0x83, 0x3, "9dae75"}, &(0x7f00000029c0)={0x20, 0x84, 0x4, "0307a280"}, &(0x7f0000002a00)={0x20, 0x85, 0x3, "ed4cce"}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0xd00}]}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0xd00}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 4.193057583s ago: executing program 2 (id=180): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000005e80)={0x2020}, 0x2049) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002040)=ANY=[@ANYBLOB="1201000000000000000000000902814a94b5817cf8243fad633946862ae0d64e0798e187d92a687559f8432a01d82d3a6f0482c604000000b8baa00f7d2f4d2b00000000000000000000040000000000000000000000000df95b0d908baba3a71a6e531c704e000000000000000008006fcc6318e6594ebf30c4a313fb000000000000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000392cdaab4a73000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="73b4083bebff38866b53b975574a6a8373b542ca6f3d67d05dd4c90fdd2c9c965c82182a2a8fe8d20dfcbe122b8c9500d70493c5b34fd8aebf5e02"], 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0xf9, 0x7, 0x6, 0x0, 0x3, 0x0, 0x4, 0x40, 0x7, 0x79, 0x9, 0x80, 0x0, 0x85d7bc0e, 0x9, 0xf, 0x6, 0x0, 0x7, '\x00', 0x5, 0x6}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0xa) 2.947029913s ago: executing program 1 (id=184): pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x202002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f23d266baa00066b86b4266ba420066efc4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x3c}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x3, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003fdd8f8080304f7e04a9c0102030109023b0009070a100a0904f106030090880a090507100000028f0107250103012e0a09050902080059030b0705863797e2900905010100040304078e0138fc046c4aff68e88bcd588b816cdc490d43ef16340d30a4421e3bebeb3232a10556b4fcdf9a8d22f0802738369e594332"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, 0x0, 0x22e02, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x1, 0x10000, 0x0, 0x4002004c8, 0x1000, 0x0, 0x1fd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa010100}}}}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x215000, &(0x7f0000000180)={[{@max={'max', 0x3d, 0xec2c}}, {@max={'max', 0x3d, 0x3}}, {}, {@stats}, {@max={'max', 0x3d, 0x7}}], [{@flag='rw'}]}) 2.463747501s ago: executing program 0 (id=189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(0xffffffffffffffff, r1, 0x2) 2.456435211s ago: executing program 0 (id=190): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000c14}, 0x40) 2.439399661s ago: executing program 0 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) lseek(r3, 0x40203, 0x4) ustat(0x105, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x1, 0x3, r2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x18, 0x0, 0x1, 0x81}}], 0x18}}], 0x1, 0x20080000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x424000, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x2, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000100001000000000000000000fe8000000000000000000000000000bbac1414bb0000000000000000000000000004fff920000001000000001d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac14142a000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a0000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="02000003078b5903dc42784a05d864e247a833e6cd434e972d3588f7576d9d89c8fd782f5a7687d50b129a5bb5547b44"], 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x1, 0x0, 0x0) chroot(0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1e, 0x10, 0x70bd26, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) write$uinput_user_dev(r7, &(0x7f00000003c0)={'syz1\x00', {0x8, 0x36cf, 0x100, 0x1000}, 0x5, [0x100, 0x1, 0x2, 0x6c2, 0x2, 0xfffffffe, 0x5, 0x100000, 0x8, 0x4, 0x8, 0xd, 0x7fff, 0x6, 0x3, 0x9, 0x81, 0x0, 0x5, 0xe8, 0x100, 0x100, 0x9, 0x5, 0x10000, 0xfffffffe, 0x3, 0x7, 0x5, 0xc, 0x3, 0x8, 0x101, 0x401, 0x1ff, 0xa5d1, 0x40, 0x3, 0x4, 0x4, 0x9, 0xf91c, 0x830, 0x1000, 0x9, 0x61e, 0x101, 0x9, 0x40, 0x0, 0x5, 0x5, 0x8, 0xcb9, 0x0, 0x7, 0x6, 0x7693, 0x400, 0x5, 0xffff, 0x3, 0x2440], [0x9, 0x5, 0x7, 0x8, 0xf6, 0x8, 0x7, 0x1, 0x5, 0x8, 0x7, 0x3, 0x6098, 0xa8c, 0x7b883a6d, 0x6, 0x2, 0x7fffffff, 0x2, 0x3, 0x1, 0x2, 0x7f, 0x28ea, 0xc, 0x6, 0x4, 0xe, 0xc, 0x72d2dc17, 0x7, 0x0, 0x9, 0x2, 0x10, 0x9, 0x100, 0x47d20, 0xb, 0x8, 0x3, 0x9, 0x401, 0x6, 0x6d, 0x4, 0x7f, 0x6, 0x1, 0xe6, 0xfffffff8, 0x928f, 0x400, 0x7ff, 0x4, 0x0, 0x0, 0x7, 0xfff, 0xffff, 0x1, 0xb7f, 0x1ff, 0x7], [0x5, 0x88af, 0x8, 0xb6, 0x8, 0x0, 0x2, 0xe, 0x400, 0x8, 0x5707, 0x9, 0x6, 0x3, 0x5, 0x8, 0x7, 0x6, 0x1ff, 0x1000, 0x3, 0xfff, 0x8, 0x1, 0x9, 0x6, 0x8, 0x6, 0x7, 0x9, 0x6, 0x1000, 0x81, 0x6, 0x1, 0x5, 0x10, 0x6, 0x5, 0x80000000, 0x6, 0x97, 0x7, 0x5, 0x9, 0x1, 0xffff, 0xffffffff, 0x9, 0x3, 0x5, 0x8000, 0x3, 0x100, 0x1, 0x46, 0x5, 0x7, 0x400, 0x800, 0x6, 0xb7b2, 0x80, 0x9], [0xfff, 0x400, 0x4fc0, 0x4, 0x80, 0x5, 0x6, 0xffff, 0x400, 0xd, 0x3, 0x9, 0x0, 0x6d, 0x36ed, 0x0, 0x0, 0x5, 0xb, 0xfffffffc, 0x9, 0x8, 0x6, 0x8, 0x2, 0x2, 0x6, 0x3, 0x40, 0xaa, 0x100, 0x9, 0xfffffffc, 0x9, 0x9, 0x4, 0x200, 0x9, 0xfffffff8, 0x84e, 0x2, 0x1, 0x2, 0x4, 0x3, 0x1, 0x0, 0x1, 0x50e, 0xb, 0xe03c, 0xffffffff, 0x7, 0x7, 0xfa78, 0x4fd2, 0x3, 0x1c, 0x64f, 0x3, 0x3ff, 0x2, 0x10, 0x81]}, 0x45c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000000)={'xfrm0\x00', 0x3}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0x2a4}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80040, 0x0) 2.223365355s ago: executing program 0 (id=192): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e20, @local}}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e24, @empty}}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x401, {{0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x88) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='reiserfs\x00', 0x3000000, &(0x7f0000000240)='hsr0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000400)={'TPROXY\x00'}, &(0x7f0000000440)=0x1e) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000480)={'dummy0\x00', 0x2}) mount$binder(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x100108a, &(0x7f0000000540)={[{}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x3}}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @multicast1}, &(0x7f00000006c0)=0xc) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe8, 0x13, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x7, 0x9, 0x7, {0x4e20, 0x4e23, [0x1, 0x3, 0x10, 0xfffffff8], [0x7, 0x8, 0x7, 0x8ec], r6, [0xfff, 0x3]}, 0xf5}, [@INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "f39d0283ffe6f6ff2378751c6c8420ba6a7d13ca69ae52e38e8f48fed7d90e9c274b51445e6f84720bc48e2ce906d6969272af920681e76931b6d901cca18b4c0b6bc4acb2ee3e17eda4ec0a0683d2f8de99f808dbf3cdedaf8940e63ce0335a52466ba61c2d923fd35677f04239211cfa061cb9b54df7da457b01fb7e60b3dfcb48228f2b5abb7afdddc45076bd70eb47d4c94836d0"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x24000845) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000880)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1}}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000900)={0x2, 0x255b30f7, 0x35, &(0x7f00000008c0)=""/53}) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x4f0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0x1, 0x4, 0xa2, 0x20, 0x5}, 0x19, &(0x7f00000009c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e0484b7316abc9a9aba1d54189483ee7"}]}, 0x2, [{0xe, &(0x7f0000000a00)=@string={0xe, 0x3, "6191d61af87e721efdf41b99"}}, {0xe2, &(0x7f0000000a40)=@string={0xe2, 0x3, "e0911e40496052f1bb0aa1291536d436430582f6335f4194b9b032eb9496765bc498a883c48ca2eb466994a0137c773310ee563cef8139f0a6bce931187e552f7eef0a5c6909f3b5d7a874d31db70b296ffa77f40b995ace5f45852c0d7ff71277757f665274d2c67b9558608d66818d28e6abba9cc22dfcf4363716617d16ff8963f59afbe6a4dda21c165a875b1031c74bd4dca3b6ce6663f3021a165dd05f765c33aba30136b7e833f598886856d9c88d37c8924758520e16f4279d7c2ee91c3028c509af78eab20aa605cacfd382237567f8c99806c53be60d67f34c88dd"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000cc0)={0x24, &(0x7f0000000b80)={0x0, 0x1, 0x69, {0x69, 0x24, "e840e8a575d026cfbb422c1b9bb3f314fe9a2bd44becf5df339133fa4144fd0b9282e21d16c61b27f2fb25ac00766e3d082889cb8ab7ff924a8b7e41e34e8dfc889f9722354bdde79eb32404f4c246d58c9c718a334f5278ba2f26a29b4972a12c5691d8dfc47f"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f0000000c40)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xc, "e32de5b3"}, @main=@item_4={0x3, 0x0, 0xa, "6d8423bb"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x6d3}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x0, 0x16, 0x14, "7e40efdf1535225a4c091baf2151d8e63c8102c0"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000dc0)={0x20, 0x1, 0x7d, "46ce87c7e7a9e9682580c4acfd14d156d9f2c3365560f1c52e43aabcae02eaad7ce0cd6bc340817ff6f90a0b97e6585a0788c78cef6c7e4a11f0bc6baa23eb70e405ef608a650ea6fe723f241b79b16d1c6db7fac16c113af10bf27c24b6c49c6a004b06613648ea8ef0633e11e7d50931b1a7237715b5db0fbbc547ab"}, &(0x7f0000000e80)={0x20, 0x3, 0x1, 0x3f}}) write$cgroup_pressure(r4, &(0x7f0000000f00)={'some', 0x20, 0x200, 0x20, 0x70}, 0x2f) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$xdp(r4, &(0x7f0000001100)={0x2c, 0x6, r6, 0x23, r4}, 0x10) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000014c0)={0x0, &(0x7f0000001140)=[@cpuid={0x2, 0x18, {0x1, 0x1}}, @code={0x1, 0x43, {"440faa0f01ca8f683095c121c401e1e17600440f18790fc44189f97b0366b8b3008ec826410f01c266b806018ec0670f01d1"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x5b, {"0f01c5c4e1fb2ca4a7d9810000c4e1dd62652348b8f57f0000000000000f23d00f21f835000000090f23f864f30faecb65460f791e640f01cb2e66410f383d65f7430f97c4460f797b00"}}, @cpuid={0x2, 0x18, {0x3, 0x6}}, @code={0x1, 0x79, {"c402499db03300000066bad104ecf3440f35420f21bcc7442400ca360000c744240204000000c7442406000000000f011c24410f09c744240080000000c744240200800000ff2c2466baa00066b80a0066ef66baf80cb8a8c52887ef66bafc0cb04cee66baa100ec"}}, @uexit={0x0, 0x18, 0xffffffffffff8000}, @cpuid={0x2, 0x18, {0x7, 0x7}}, @code={0x1, 0x76, {"66460f3880acad79000000c7442400cf000000c7442402e7000000c7442406000000000f0114246743cb0f01c3c744240038000000c744240284000000ff2c240f090f3acc0488008fa9e894b0b4210000b9800000c00f3235001000000f30c442cdad6a00"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x71, {"66baf80cb86b694789ef66bafc0cecc74424002d000000c744240200000000ff1c24c4a125d060faf3662e450f01704c66b83c000f00d8c7442400ba000000c744240200000000ff1c24430f20400f79bd8000c0fe400f20c2b9a10b00000f32"}}, @code={0x1, 0x70, {"440f011ccc0f0fc80dc402c53d6080b98d090000b80a000000ba000000000f30c402919aac1645000000c442019a3a263e66470f3881026566440fc7721dc744240000380000c744240200000000c7442406000000000f011424c401bdebfb"}}, @uexit={0x0, 0x18, 0xec}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x7}}, @uexit={0x0, 0x18, 0xc4f}], 0x376}) 1.367840158s ago: executing program 1 (id=193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0xff}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f000468e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e52af0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0faad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bd9840e7597c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05412d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5effff7fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1bd8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.24953081s ago: executing program 1 (id=194): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000100)=@ethtool_stats}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="04e0d6", 0x3}], 0x1}, 0x0) fcntl$setsig(r2, 0xa, 0x12) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) fcntl$setown(r2, 0x8, r1) (async) fcntl$setown(r2, 0x8, r1) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@getsa={0x134, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {@in=@multicast2, 0x4d4, 0xa}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@empty, 0x2, 0x0, 0x8}}, @sa={0xe4, 0x6, {{@in=@broadcast, @in=@multicast2, 0x4e21, 0x0, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x87, 0x0, 0xee01}, {@in=@broadcast, 0x4d3, 0xff}, @in=@private=0xa010101, {0x3, 0x1, 0x93, 0xd71, 0x410e519c, 0x900, 0x8, 0x8}, {0x2, 0x7, 0x6, 0xffff}, {0xb, 0x9, 0x4}, 0x70bd29, 0x0, 0x2, 0x1, 0x60, 0x20}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x6e72da5d09b3eafc) tkill(r1, 0x1013) (async) tkill(r1, 0x1013) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f00000001c0)=""/236) (async) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f00000001c0)=""/236) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r8, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0xd}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r8, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0xd}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r9, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 1.139654332s ago: executing program 1 (id=195): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f0000000000)=0x2f7) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x38, 0x4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES8], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) fstat(0xffffffffffffffff, &(0x7f0000000440)) setuid(0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1.139140532s ago: executing program 2 (id=196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x10000}, @cpuid={0x2, 0x18, {0x2, 0x5}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x4, 0x1}}], 0x60}) (rerun: 32) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.073548193s ago: executing program 2 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0xa45, 0x0, 0x2}, {0x82f, 0x0, 0x5}, {0xaff, 0x0, 0x3}, {0x0, 0x0, 0x3f2}, {0x9d2, 0x0, 0xd363}, {0x247, 0x0, 0x88c}, {0xb61, 0x0, 0x943c}, {0xa36, 0x0, 0x4}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) (async) renameat2(r5, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) fcntl$setstatus(r3, 0x4, 0x460c0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYRES64=r1], 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 842.681036ms ago: executing program 0 (id=198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x1, {0x1000, [{{0x2, 0x0, 0x5}, 0xd, 0xef, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x81, 0x2, 0x7, './file0'}]}}, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3400000000000000000000000700000044241753ac1e0001"], 0x38}, 0x4000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) pread64(r0, &(0x7f0000001200)=""/198, 0xc6, 0xff) rt_sigsuspend(&(0x7f0000000240)={[0xfffffffffffffffd]}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd37, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @empty}}}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000000c0)) rename(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') 659.115349ms ago: executing program 3 (id=200): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1ff, 0x8, 0x4, 0x5}, {0x6b42, 0x6, 0xc, 0x2}, {0xa, 0x5, 0x5e, 0xffff59b0}, {0x8, 0xa, 0x9, 0x5}]}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r2, 0x4758f000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 657.42045ms ago: executing program 3 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000600)=""/125, 0x7d}], 0x1, 0xba, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 602.30261ms ago: executing program 3 (id=202): setuid(0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file0\x00', 0x108) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000400)='./file0/../file0/../file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x11, 0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1]) 585.788811ms ago: executing program 3 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 515.907272ms ago: executing program 3 (id=204): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 514.548632ms ago: executing program 3 (id=205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xf}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xac}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x14) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x4, {{0xa, 0x4e21, 0x2, @local, 0xcf7}}, {{0xa, 0x4e23, 0x1ff, @empty, 0x10}}}, 0x108) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) move_mount(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x40) (async) syz_usb_connect(0x5, 0x1b6, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0xfe, 0x52, 0x3b, 0xff, 0xbfd, 0x115, 0x923a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a4, 0x1, 0x1, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0x54, 0x9, 0x3, 0x98, 0xd1, 0x8f, 0x9, [@generic={0xae, 0xe, "18d32ec517ba47464c2cbe71a47c1fa7a20fa1242a28a3982b16678f6223c4399976a0980c71e64457d06f222f9d42eb08f35f0a678032cff8d23faf3c710994f5ae86fe9d9d521ca3ccff4328319b85124e06b19c72dee27e9651b1e5d28fd53539110ba66e48110200bba87f61797c90de5f4af21c48487ea9f5f909f21efe8ed0be4c4c6f2c1bd2b0c5eeaedb4d907c1fac7958c71bdfaed8cc32abcde85ebd894bd0962c0fa1c0ed3cde"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x6b, 0x7, 0x40, [@generic={0xb4, 0x21, "db96357cef0fac6c9572c55258a946c60353ce7f70e545ca74df0ff9c7aa7f78875bf0f93f07f93bfb22b54e70a43f11105426d87e1113cb7f169bf8e9a43d37aecc98df3209e962d350fb22badd1e4b3c9849bc37b05e7a1e09183682454d1fcd376b20516e844d86bfef47f93f94d4e6a85f20e937ce2452abb70f2928ffab52dab35eb605acdca915cbff85b667ea3824872629374043004c0975d63f0244e629b5da2cea15949513171e78a302d99af1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x9, 0x8, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x3}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x0, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xfffd}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x6, 0x6, 0x3, 0x10, 0x4}, 0x11e, &(0x7f00000005c0)={0x5, 0xf, 0x11e, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x400, 0xff00, 0x40}, @generic={0xf9, 0x10, 0xb, "77ebd3c0dc6142fb2e706a94faa402326b4e4e92eaa728c5080f634d2bbf544da8d26370cdaf6fb6a2dcf39b9b1f84bb84b7c5b15909819761e30171517925d67d0633ffd366d086e7b5d85b16097f9b94e75f62307d342dba04af31bc7d5743cd24d363c9b9a858638d72235e3954647db5e7c5a5126abb6e096137dca889a6bab83955df0119e20b3f15bd5bfcf4487f66efb9645be994c0dedbb00165043d0f5669d775af8ac9a0ebd4038d2126cf0951c672744eaf29f0c35aa2cd570b71bcd9efab9fa15b718ba5e74acea56e74fedd6447b9b3fb1d1deede09517e888b7f041514da76725282193a4cd567e08afbd96c95f742"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x8, 0x58}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x1, 0x5}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44c}}, {0xe9, &(0x7f00000007c0)=@string={0xe9, 0x3, "9e567e0a42225b8847492929be4228fb667cd9c16936111cb55b45aab25ee8e6e41e65df8bd55af3bd9b43192e493a09bbec3f8c434d50484ee9fa90cc053e4914435560270a64e0e6df9d48820b31b762d11dc90301992a91977fb0fae7db42103ca67fbc7689ade1772aa1904d4b94010c955500fc54f1e233366d7e5b4c515e6e970c57baadca1ccaa21f99f237b1ee4e3ad9d4c96c665fe6b6ddf32eb42fc761a006d5645fb6c1ac498a9166e11bca8d915996bab2b7345312c24c9776ebe2efdda32e2cf86b0696db04b41a2dca4af767b7a6efbe4da5bdad24c4b95f35c3f722385d7926"}}, {0xdf, &(0x7f00000008c0)=@string={0xdf, 0x3, "3e169cd8468be0cf06dbba4462172b08e2836c807f8db17e5674a979acc138ce63b5f271eab513369642933b2fbf35fce99aa46af794ed435664db144f20a9933c9c0511aced2ec82cb695af41666ea68afcf8a9bf5ec93227df6dd403d3a0bf42260ec0e0762757d179838ab764e6d0485672023e4a87f5241a0a18c5267ede122b650f70cb4055b078f3e1f0ae9cfe055906f3ed649908785e35a9555fe91e33246eb60ccd78f84433623770d682dc7578f45193fa8d4f9730c660aede4da697578a9ec487407bb7d6c963f4d102b26207156ce56b78655d23dbd886"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x445}}, {0x22, &(0x7f0000000a00)=@string={0x22, 0x3, "45fb8304dcc36fcab054bc893bd69d4f0175952dc2a49a116c7e6d5b53e1e601"}}]}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9f}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004054}, 0x48800) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x10) (async) mkdir(&(0x7f0000000d40)='./file0\x00', 0x90) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x8c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000f40)={{0x2, 0x0, 0x80, {0xf000, 0x8000000, 0x2}}, "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", "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"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000002fc0)) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003040), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000003140), 0x8200, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000003180)={'vxcan1\x00'}) r9 = memfd_secret(0x0) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x30, r10, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x4048000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r5) r11 = syz_io_uring_setup(0x4c7d, &(0x7f0000003340)={0x0, 0x802a, 0x2008a, 0x1, 0x15a, 0x0, r3}, &(0x7f00000033c0), &(0x7f0000003400)) syz_io_uring_setup(0x1c8a, &(0x7f0000003440)={0x0, 0x584b, 0x800, 0x1, 0x286, 0x0, r11}, &(0x7f00000034c0), &(0x7f0000003500)) (async) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003580)=[@text16={0x10, &(0x7f0000003540)="0fc71b0f070f01cf6536f3def1baf80c66b854ec178366efbafc0c66b80000000066ef2ef30fc7b1224bf166f2260f01f436660f388255ee0f2313", 0x3b}], 0x1, 0x1, &(0x7f00000035c0)=[@efer={0x2, 0x9400}, @flags={0x3, 0x40000}], 0x2) 507.258902ms ago: executing program 2 (id=206): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fgetxattr(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="42747266732e636f6d2e6170706c652e737973269d030000df4ebb79f50000000074790042fd5add6c3ff40b68a610c802c947cbd13ce16a7af2b05e653e880c9b46e2b1e1df6de168306bbf37d9df4a9e9374"], &(0x7f00000003c0)=""/169, 0xa9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtaction={0x60, 0x32, 0x1, 0x70bd29, 0x25dfdbf9, {}, [{0x4c, 0x1, [@m_ipt={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x1e, 0x6, "17821943ca94e0fe9522c45ec3d2a66a4b0dffa046f424a5c407"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, &(0x7f0000000680)=""/116, 0x74) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="1bfeffff000101041100000000000000010000000000198000000100500800000000034000000000000001800000018000000100ac1414aa00000200e000e1aa64990a98000200000280000001008400000000000280000001003a00000000000280000001000600000000000280000001008900000000000c40007dde3cd159ada7057b875d552f85021e5eb6e6ebc8d7816f0ed44990c0bfc9f54340ac6f65882ea7500057ae68f090b36d0a1321e59a1048ad0f84b9b36f0c5823cd198b44a1058db4c6e6474cd4fd71780472a1"], 0x14}}, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000300008802c0000800400098024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000100", @ANYRES32=r8, @ANYBLOB="4e0774f2bb8ba2476e95c602e5dbefedf1e3968808906c255a184d095aafca1057f2fc44ea105a17d0520f7700"/60], 0x4c}}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e24, @local}, 0x205, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000200000000000, 0x81, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r10, &(0x7f0000000480)="532e87ac770767f7429748", 0xb) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) syz_clone(0x10000000, &(0x7f0000000100)="457891a4e7edc0db4c54e9aedcb1719ef00fca9b5f83e561cf8d5f64731bd7d674377c692e14864f0440b436bdd89a9ad0588ceb80a1c541e768275790d8275187abeb3d9145fcc2bb7797b3770816aace90d3eba1d2a87013b2e55ceed089e075e5ac7bebd340cc7f31a5b2a20c9ac74c1363f9fe3d88649069de6e5d12a222a5cc24d01b52b2864b9c750b659a76ce2530e9cae0", 0x95, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="baf2deaec88a0125769ecbc1b3e62c5ce57278a1b9e6ce21297f293dcbdc59bf24d306295f24b4ae71c70088b391b73d214bc9ac54e844755c88b0398ee44bc0fecfbf818058ad71760e1b2949debbc1a6a2c75015d8b7a959a1791ed973a446ae391b23052f740627729ab6f743a3e28b1fbb985339713eee5f555a910cf103e3f4e8fd0fd538365c48d609b5b5fd6fee841bb9bc454ca964e658f3440df70a47ebebb62829cabc6115") ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 491.476872ms ago: executing program 2 (id=207): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@code={0x1, 0x6c, {"66410f3a0e09440f20c035000000400f22c0c4017d64bf07000000c4629137e9f3430fc7b01c930000c461c9fe28b9800000c00f3235000400000f30640f01c548b800000000008000000f23c00f21f83503000f000f23f8360f09"}}, @cpuid={0x2, 0x18, {0x3, 0x8}}, @cpuid={0x2, 0x18, {0x7fff, 0x224f}}, @code={0x1, 0x59, {"b929030000b807000000ba000000000f3066ba2100ec366446db290f0098002000006566440f149aa4000000b8010000000f01d90f20840f9a47f2660fc777010f0da48fd282fc02"}}, @cpuid={0x2, 0x18, {0xffff, 0x401}}, @uexit={0x0, 0x18, 0xd2}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x3ff, 0x10}}, @code={0x1, 0x4c, {"c7442400b4000000c744240200000000ff1c240efb0266baa000b84aca6fef0f01c30f35f80fc7ae005000000f090f01c5c4c39979cc002e66f3ab"}}, @cpuid={0x2, 0x18, {0xffffff64, 0xfffff800}}, @uexit={0x0, 0x18, 0x7f}, @code={0x1, 0x56, {"c4e269bc9000000000440f792243d766baf80cb818bbc88eef66bafc0cb83c000000efc42265986c1ac9660f38801ac4a22d9d870300000026660f38800fdd7300660f23df"}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x8000, 0x80000000}}, @code={0x1, 0x69, {"66b868000f00d866cf360f30f04183230df2676765437500410f01cac744240000800000c74424020d000000c7442406000000000f011c24b9800000c00f3235000800000f300f01c866baf80cb8f52da388ef66bafc0cec"}}, @cpuid={0x2, 0x18, {0xfff}}, @cpuid={0x2, 0x18, {0x10001, 0x2}}, @uexit={0x0, 0x18, 0x3}], 0x308}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0xfffffffa) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x99b33000) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) 359.579084ms ago: executing program 2 (id=208): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x200000004, {0x7, 0x28, 0x20000000, 0x8010, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x7f) close(0x3) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "9540e45e"}]}}, 0x0}, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x6014}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, &(0x7f00000000c0)=""/8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup(r2) 0s ago: executing program 0 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote, 0x4e22}, 0x6e6bbd}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in6=@mcast1, @in=@broadcast, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 22.318390][ T36] audit: type=1400 audit(1751261088.729:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.319636][ T281] cgroup: Unknown subsys name 'net' [ 22.341085][ T36] audit: type=1400 audit(1751261088.729:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.368344][ T36] audit: type=1400 audit(1751261088.759:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.368518][ T281] cgroup: Unknown subsys name 'devices' [ 22.554313][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.559935][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.693279][ T36] audit: type=1400 audit(1751261089.109:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.716480][ T36] audit: type=1400 audit(1751261089.109:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.725081][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.741520][ T36] audit: type=1400 audit(1751261089.109:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.773742][ T36] audit: type=1400 audit(1751261089.169:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.799176][ T36] audit: type=1400 audit(1751261089.169:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.829295][ T36] audit: type=1400 audit(1751261089.239:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.829785][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.854902][ T36] audit: type=1400 audit(1751261089.239:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.976532][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.992406][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.999777][ T288] bridge_slave_0: entered allmulticast mode [ 24.006524][ T288] bridge_slave_0: entered promiscuous mode [ 24.012957][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.019986][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.027078][ T288] bridge_slave_1: entered allmulticast mode [ 24.033371][ T288] bridge_slave_1: entered promiscuous mode [ 24.154399][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.161438][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.168585][ T294] bridge_slave_0: entered allmulticast mode [ 24.175068][ T294] bridge_slave_0: entered promiscuous mode [ 24.187994][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.195061][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.202335][ T294] bridge_slave_1: entered allmulticast mode [ 24.208521][ T294] bridge_slave_1: entered promiscuous mode [ 24.222281][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229342][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.236666][ T293] bridge_slave_0: entered allmulticast mode [ 24.242898][ T293] bridge_slave_0: entered promiscuous mode [ 24.257567][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.264802][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.271854][ T293] bridge_slave_1: entered allmulticast mode [ 24.278133][ T293] bridge_slave_1: entered promiscuous mode [ 24.321752][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.328853][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.335951][ T295] bridge_slave_0: entered allmulticast mode [ 24.342098][ T295] bridge_slave_0: entered promiscuous mode [ 24.348608][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.355699][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.362818][ T295] bridge_slave_1: entered allmulticast mode [ 24.368973][ T295] bridge_slave_1: entered promiscuous mode [ 24.388970][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.396025][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.403522][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.410537][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.519609][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.526716][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.533997][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.541009][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.549747][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.556798][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.564132][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.571147][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.579104][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.586159][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.593431][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.600443][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.613538][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.621255][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.628745][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.636079][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.643558][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.650906][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.658382][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.668742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.675802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.725741][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.732858][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.740677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.747757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.760997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.768086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.789010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.796097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.806891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.813947][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.821817][ T288] veth0_vlan: entered promiscuous mode [ 24.832072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.839126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.859874][ T288] veth1_macvtap: entered promiscuous mode [ 24.899116][ T294] veth0_vlan: entered promiscuous mode [ 24.910661][ T295] veth0_vlan: entered promiscuous mode [ 24.917066][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.938905][ T293] veth0_vlan: entered promiscuous mode [ 24.953398][ T294] veth1_macvtap: entered promiscuous mode [ 24.964199][ T293] veth1_macvtap: entered promiscuous mode [ 24.966599][ T308] ======================================================= [ 24.966599][ T308] WARNING: The mand mount option has been deprecated and [ 24.966599][ T308] and is ignored by this kernel. Remove the mand [ 24.966599][ T308] option from the mount to silence this warning. [ 24.966599][ T308] ======================================================= [ 24.971635][ T295] veth1_macvtap: entered promiscuous mode [ 25.084097][ T313] rust_binder: Write failure EINVAL in pid:5 [ 25.094737][ T317] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 25.122867][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.263828][ T333] rust_binder: Error while translating object. [ 25.263888][ T333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.270158][ T333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 25.364582][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.504035][ T342] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure [ 25.525805][ T45] usb 3-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.535887][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.543693][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 25.552932][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.561840][ T45] usb 3-1: config 0 descriptor?? [ 25.704507][ T359] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 25.767720][ T317] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.789636][ T317] overlay: filesystem on ./bus not supported as upperdir [ 25.802810][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 25.809095][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.818120][ T45] usb 3-1: USB disconnect, device number 2 [ 25.872457][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.880619][ T371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.913150][ T373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21'. [ 25.942805][ T378] rust_binder: Error in use_page_slow: ESRCH [ 25.942827][ T378] rust_binder: use_range failure ESRCH [ 25.949026][ T378] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 25.954726][ T378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.963166][ T378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:34 [ 26.042335][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 26.064299][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 26.073061][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 26.082101][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 26.091385][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.101432][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.114059][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.127996][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 26.137636][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.169612][ T390] binder: Binderfs stats mode cannot be changed during a remount [ 26.180239][ T31] usb 4-1: config 0 descriptor?? [ 26.404210][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 26.438435][ T31] usb 4-1: USB disconnect, device number 2 [ 26.446876][ T31] usblp0: removed [ 26.942435][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.050962][ T412] binder: Bad value for 'stats' [ 27.082401][ T31] usb 4-1: device descriptor read/64, error -71 [ 27.236835][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.243328][ T427] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 27.303253][ T430] binder: Unknown parameter '/proc/cpuinfo' [ 27.322359][ T31] usb 4-1: device descriptor read/64, error -71 [ 27.372459][ T36] kauditd_printk_skb: 124 callbacks suppressed [ 27.372476][ T36] audit: type=1400 audit(1751261093.779:198): avc: denied { ioctl } for pid=431 comm="syz.0.40" path="socket:[4436]" dev="sockfs" ino=4436 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.403686][ T36] audit: type=1400 audit(1751261093.789:199): avc: denied { nlmsg_write } for pid=431 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.421182][ T435] rust_binder: Write failure EFAULT in pid:63 [ 27.424218][ T36] audit: type=1400 audit(1751261093.789:200): avc: denied { create } for pid=431 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.425887][ T435] rust_binder: Error in use_page_slow: ESRCH [ 27.430309][ T36] audit: type=1400 audit(1751261093.789:201): avc: denied { bind } for pid=431 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.475158][ T435] rust_binder: use_range failure ESRCH [ 27.475186][ T435] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 27.480867][ T435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.488736][ T435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63 [ 27.555958][ T439] rust_binder: Error while translating object. [ 27.565390][ T439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.571879][ T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:13 [ 27.602343][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.752378][ T31] usb 4-1: device descriptor read/64, error -71 [ 27.862780][ T45] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 27.966035][ T461] __vm_enough_memory: pid: 461, comm: syz.2.50, bytes: 70373039144960 not enough memory for the allocation [ 27.992479][ T31] usb 4-1: device descriptor read/64, error -71 [ 28.013651][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.024886][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 28.035516][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.042126][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 28.051194][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.060001][ T45] usb 1-1: config 0 descriptor?? [ 28.065396][ T445] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 28.112589][ T31] usb usb4-port1: attempt power cycle [ 28.452373][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.473308][ T31] usb 4-1: device descriptor read/8, error -71 [ 28.480567][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.487872][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.495265][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.502840][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.510070][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.517494][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.524746][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.531947][ T45] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 28.539785][ T45] microsoft 0003:045E:009D.0001: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.0-1/input0 [ 28.551248][ T45] microsoft 0003:045E:009D.0001: no inputs found [ 28.557785][ T45] microsoft 0003:045E:009D.0001: could not initialize ff, continuing anyway [ 28.613525][ T31] usb 4-1: device descriptor read/8, error -71 [ 28.650557][ T467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 28.660575][ T36] audit: type=1326 audit(1751261095.069:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=468 comm="syz.3.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7bfb8e929 code=0x0 [ 28.692402][ T36] audit: type=1400 audit(1751261095.089:203): avc: denied { ioctl } for pid=444 comm="syz.0.45" path="socket:[4718]" dev="sockfs" ino=4718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.696963][ T445] 9pnet: Unknown protocol version 2000.u [ 28.724643][ T470] /dev/sg0: Can't lookup blockdev [ 28.732220][ T445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.742888][ T445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.783374][ T464] usb 1-1: USB disconnect, device number 2 [ 28.992422][ T424] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 29.143789][ T424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.151839][ T424] usb 3-1: not running at top speed; connect to a high speed hub [ 29.160354][ T424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.170504][ T424] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.181487][ T424] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.190659][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.198685][ T424] usb 3-1: Product: syz [ 29.202860][ T424] usb 3-1: Manufacturer: syz [ 29.207446][ T424] usb 3-1: SerialNumber: syz [ 29.302342][ T429] Bluetooth: hci0: command 0x1003 tx timeout [ 29.304012][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.375310][ T482] rust_binder: Write failure EFAULT in pid:32 [ 29.385966][ T36] audit: type=1400 audit(1751261095.799:204): avc: denied { ioctl } for pid=483 comm="syz.1.58" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.422339][ T36] audit: type=1400 audit(1751261095.829:205): avc: denied { associate } for pid=473 comm="syz.2.54" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.425246][ T424] usb 3-1: 0:2 : does not exist [ 29.448172][ T424] usb 3-1: unit 6 not found! [ 29.455895][ T424] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 29.465892][ T424] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 29.476031][ T424] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 29.493543][ T424] usb 3-1: USB disconnect, device number 3 [ 29.502343][ T36] audit: type=1400 audit(1751261095.909:206): avc: denied { remount } for pid=487 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.533578][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.547796][ T36] audit: type=1400 audit(1751261095.959:207): avc: denied { write } for pid=492 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.553175][ T493] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 29.621308][ T504] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 29.671951][ T508] mmap: syz.3.67 (508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.703519][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.717938][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.728504][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 29.738115][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.752230][ T45] usb 1-1: config 0 descriptor?? [ 29.925252][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.951994][ T521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.979583][ T528] Zero length message leads to an empty skb [ 30.099578][ T534] fuseblk: Unknown parameter 'user' [ 30.160272][ T45] kye 0003:0458:4018.0002: unknown main item tag 0x0 [ 30.169863][ T45] kye 0003:0458:4018.0002: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 30.247104][ T544] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 30.254796][ T544] rust_binder: Write failure EINVAL in pid:44 [ 30.256255][ T424] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.367061][ T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 30.422570][ T424] usb 2-1: Using ep0 maxpacket: 16 [ 30.440791][ T424] usb 2-1: config 0 has no interfaces? [ 30.447817][ T424] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.457103][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.465405][ T424] usb 2-1: Product: syz [ 30.469658][ T424] usb 2-1: Manufacturer: syz [ 30.474527][ T424] usb 2-1: SerialNumber: syz [ 30.479978][ T424] usb 2-1: config 0 descriptor?? [ 30.487488][ T573] 9pnet_fd: Insufficient options for proto=fd [ 30.672408][ T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.687848][ T424] usb 2-1: USB disconnect, device number 2 [ 30.712084][ T574] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 30.822895][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 30.829524][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.838068][ T63] usb 3-1: config 1 interface 0 altsetting 25 bulk endpoint 0x82 has invalid maxpacket 32 [ 30.848055][ T63] usb 3-1: config 1 interface 0 altsetting 25 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.861293][ T63] usb 3-1: config 1 interface 0 has no altsetting 0 [ 30.869518][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.878707][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.886743][ T63] usb 3-1: Product: syz [ 30.890955][ T63] usb 3-1: Manufacturer: syz [ 30.895584][ T63] usb 3-1: SerialNumber: syz [ 30.901297][ T571] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.137397][ T580] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 31.144867][ T580] rust_binder: Write failure EINVAL in pid:60 [ 31.169525][ T588] binder: Bad value for 'max' [ 31.510739][ T571] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.718827][ T571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 31.719378][ T590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.721172][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.743430][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.759547][ T63] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 31.770266][ T63] usb 3-1: USB disconnect, device number 4 [ 31.942382][ T429] Bluetooth: hci0: command 0x1003 tx timeout [ 31.942390][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.307218][ T424] usb 1-1: USB disconnect, device number 3 [ 32.426339][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 32.426355][ T36] audit: type=1400 audit(1751261098.839:237): avc: denied { validate_trans } for pid=624 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.479007][ T36] audit: type=1400 audit(1751261098.889:238): avc: denied { create } for pid=629 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 32.479525][ T630] FAT-fs (rnullb0): bogus number of reserved sectors [ 32.505957][ T630] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 32.579010][ T36] audit: type=1400 audit(1751261098.989:239): avc: denied { create } for pid=634 comm="syz.1.106" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.579877][ T635] can: request_module (can-proto-6) failed. [ 32.599538][ T36] audit: type=1400 audit(1751261098.989:240): avc: denied { read } for pid=634 comm="syz.1.106" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.627635][ T36] audit: type=1400 audit(1751261098.989:241): avc: denied { open } for pid=634 comm="syz.1.106" path="/21/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.650342][ T36] audit: type=1400 audit(1751261098.989:242): avc: denied { ioctl } for pid=634 comm="syz.1.106" path="/21/file0" dev="tmpfs" ino=129 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.674488][ T36] audit: type=1400 audit(1751261099.019:243): avc: denied { write } for pid=634 comm="syz.1.106" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.696705][ T36] audit: type=1400 audit(1751261099.019:244): avc: denied { create } for pid=634 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 32.716741][ T36] audit: type=1400 audit(1751261099.039:245): avc: denied { mounton } for pid=634 comm="syz.1.106" path="/21/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.739393][ T36] audit: type=1400 audit(1751261099.049:246): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.780460][ T644] rust_binder: Write failure EINVAL in pid:66 [ 32.802412][ T464] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.939268][ T662] netlink: 'syz.1.115': attribute type 30 has an invalid length. [ 32.951192][ T652] rust_binder: Error while translating object. [ 32.951237][ T652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.957456][ T652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 32.963675][ T464] usb 1-1: not running at top speed; connect to a high speed hub [ 32.987277][ T464] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 4 [ 33.000090][ T464] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.010027][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.018119][ T464] usb 1-1: Product: 跘먶䭓穵㵵䋢͛Ⳕﶲ停槱⴯鼆䪺断꿤卶㸻툭ﬡ컈ᷛᲆ핡鳇昲丠쑋輌껺툗㻨䨺葹譛闧谣퍍㽹윝쐭鏯謽룿펑꫱쯏弊ꃺ̑筧痣⣨ᙸ巒넮晊ᑎ昽걣໺ [ 33.038877][ T464] usb 1-1: Manufacturer: 紇户鷆㰄迸량ꌜ镟鼑쑣㸧蚁갹쮩쒶촬ひ⻫빊ᆼ쐯縃絫梿⛁걭阭ꯪꗍ榞掼 [ 33.051693][ T464] usb 1-1: SerialNumber: С [ 33.072380][ T675] netlink: 'syz.3.118': attribute type 46 has an invalid length. [ 33.080216][ T675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.118'. [ 33.090067][ T675] /dev/sg0: Can't lookup blockdev [ 33.092351][ T475] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.096719][ T675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=675 comm=syz.3.118 [ 33.152048][ T679] overlayfs: overlapping lowerdir path [ 33.164204][ T679] rust_binder: Error in use_page_slow: ESRCH [ 33.164226][ T679] rust_binder: use_range failure ESRCH [ 33.170380][ T679] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 33.175999][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.184126][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:92 [ 33.232873][ T475] usb 3-1: device descriptor read/64, error -71 [ 33.263890][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.272512][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.284417][ T464] usb 1-1: 2:1: invalid format type 0x1003 is detected, processed as PCM [ 33.292951][ T464] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 33.303339][ T464] usb 1-1: USB disconnect, device number 4 [ 33.385987][ T698] syzkaller0: entered allmulticast mode [ 33.482356][ T475] usb 3-1: device descriptor read/64, error -71 [ 33.722372][ T475] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.820397][ T710] rust_binder: Write failure EFAULT in pid:95 [ 33.852367][ T475] usb 3-1: device descriptor read/64, error -71 [ 34.062374][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.102397][ T475] usb 3-1: device descriptor read/64, error -71 [ 34.192373][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.212504][ T475] usb usb3-port1: attempt power cycle [ 34.262384][ T464] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.413492][ T464] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 34.421571][ T464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.431852][ T464] usb 4-1: config 0 has no interface number 0 [ 34.432474][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.438058][ T464] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.457224][ T464] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 34.466347][ T464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.475125][ T464] usb 4-1: config 0 descriptor?? [ 34.487612][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.552356][ T475] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.573563][ T475] usb 3-1: device descriptor read/8, error -71 [ 34.685265][ T729] fuse: Bad value for 'user_id' [ 34.690120][ T729] fuse: Bad value for 'user_id' [ 34.692416][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.707981][ T464] usb 4-1: USB disconnect, device number 7 [ 34.715280][ T475] usb 3-1: device descriptor read/8, error -71 [ 34.802417][ T357] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.832419][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.952378][ T475] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.953477][ T357] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 34.970871][ T357] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.973388][ T475] usb 3-1: device descriptor read/8, error -71 [ 34.982722][ T357] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.999660][ T357] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 35.009603][ T357] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 35.018815][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.029262][ T357] usb 2-1: invalid MIDI out EP 0 [ 35.039504][ T446] udevd[446]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.055750][ T357] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 35.082358][ T45] usb 1-1: device descriptor read/64, error -71 [ 35.113303][ T475] usb 3-1: device descriptor read/8, error -71 [ 35.192469][ T45] usb usb1-port1: attempt power cycle [ 35.215283][ T739] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 35.223975][ T475] usb usb3-port1: unable to enumerate USB device [ 35.271659][ T742] overlayfs: failed to resolve './file1': -2 [ 35.300704][ T742] fuse: Unknown parameter 'fJ' [ 35.323935][ T357] usb 2-1: USB disconnect, device number 3 [ 35.532387][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.563549][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.693470][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.813232][ T749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.813268][ T749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:98 [ 35.872242][ T755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.875793][ T758] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.883881][ T755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 35.904926][ T755] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.919485][ T755] rust_binder: Read failure Err(EFAULT) in pid:127 [ 35.932415][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.973514][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.113309][ T45] usb 1-1: device descriptor read/8, error -71 [ 36.222443][ T45] usb usb1-port1: unable to enumerate USB device [ 36.229881][ T774] cgroup: release_agent respecified [ 36.257677][ T774] loop2: detected capacity change from 0 to 7 [ 36.402957][ T799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.412764][ T799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.482390][ T475] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 36.514051][ T803] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 36.521218][ T803] rust_binder: Write failure EINVAL in pid:124 [ 36.544642][ T808] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 36.633612][ T475] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.642378][ T45] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 36.644734][ T475] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 36.663801][ T475] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.670433][ T475] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 36.679486][ T475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.689789][ T475] usb 4-1: config 0 descriptor?? [ 36.695151][ T782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.802373][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 36.812464][ T464] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.932378][ T45] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 36.972329][ T464] usb 3-1: Using ep0 maxpacket: 16 [ 36.979921][ T464] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 36.989115][ T464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.997606][ T464] usb 3-1: Product: syz [ 37.001781][ T464] usb 3-1: Manufacturer: syz [ 37.006418][ T464] usb 3-1: SerialNumber: syz [ 37.013247][ T464] r8152-cfgselector 3-1: Unknown version 0x0000 [ 37.019520][ T464] r8152-cfgselector 3-1: config 0 descriptor?? [ 37.092344][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 37.097932][ T45] usb usb2-port1: attempt power cycle [ 37.104135][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.112664][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.134212][ T782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=782 comm=syz.3.154 [ 37.148149][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 37.155349][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.162524][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.169663][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.176839][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.183999][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.191154][ T475] logitech 0003:046D:C286.0003: unknown main item tag 0x3 [ 37.199056][ T475] logitech 0003:046D:C286.0003: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 37.210427][ T475] logitech 0003:046D:C286.0003: no inputs found [ 37.226887][ T464] r8152-cfgselector 3-1: Needed 1 retries to read version [ 37.234097][ T464] r8152-cfgselector 3-1: Unknown version 0x0000 [ 37.240909][ T464] r8152-cfgselector 3-1: bad CDC descriptors [ 37.358936][ T357] usb 4-1: USB disconnect, device number 8 [ 37.442394][ T45] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 37.462770][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 37.592416][ T45] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 37.612697][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 37.618184][ T45] usb usb2-port1: unable to enumerate USB device [ 37.664823][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 37.664841][ T36] audit: type=1400 audit(1751261104.079:282): avc: denied { mount } for pid=818 comm="syz.0.166" name="/" dev="configfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.665582][ T819] usb usb8: usbfs: process 819 (syz.0.166) did not claim interface 0 before use [ 37.777952][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.786500][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.797689][ T475] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 37.857005][ T829] rust_binder: 824 RLIMIT_NICE not set [ 37.871267][ T36] audit: type=1400 audit(2000000000.109:283): avc: denied { map } for pid=830 comm="syz.3.169" path="socket:[8493]" dev="sockfs" ino=8493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.899883][ T36] audit: type=1400 audit(2000000000.109:284): avc: denied { read } for pid=830 comm="syz.3.169" path="socket:[8493]" dev="sockfs" ino=8493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.923105][ T36] audit: type=1400 audit(2000000000.139:285): avc: denied { connect } for pid=830 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.943296][ T36] audit: type=1400 audit(2000000000.139:286): avc: denied { write } for pid=830 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.971677][ T36] audit: type=1400 audit(2000000000.209:287): avc: denied { mount } for pid=832 comm="syz.3.170" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.994644][ T36] audit: type=1400 audit(2000000000.209:288): avc: denied { mounton } for pid=832 comm="syz.3.170" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 38.016544][ T36] audit: type=1400 audit(2000000000.259:289): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.058112][ T36] audit: type=1400 audit(2000000000.299:290): avc: denied { bind } for pid=839 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.098844][ T36] audit: type=1400 audit(2000000000.339:291): avc: denied { setopt } for pid=842 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.151065][ T858] /dev/rnullb0: Can't open blockdev [ 38.422483][ T357] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 38.552356][ T357] usb 3-1: device descriptor read/64, error -71 [ 38.572586][ T864] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 38.792347][ T357] usb 3-1: device descriptor read/64, error -71 [ 38.822347][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.892355][ T478] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.972357][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 38.978593][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.988779][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 39.002462][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.011501][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.019511][ T45] usb 1-1: SerialNumber: syz [ 39.024151][ T478] usb 4-1: device descriptor read/64, error -71 [ 39.031860][ T45] cdc_acm 1-1:1.0: Zero length descriptor references [ 39.038619][ T357] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 39.046286][ T45] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 39.182404][ T357] usb 3-1: device descriptor read/64, error -71 [ 39.233683][ T63] usb 1-1: USB disconnect, device number 9 [ 39.262366][ T478] usb 4-1: device descriptor read/64, error -71 [ 39.422385][ T357] usb 3-1: device descriptor read/64, error -71 [ 39.502365][ T478] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.532460][ T357] usb usb3-port1: attempt power cycle [ 39.632357][ T478] usb 4-1: device descriptor read/64, error -71 [ 39.802539][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.825851][ T878] fuse: Bad value for 'rootmode' [ 39.876480][ T883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.876505][ T883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:118 [ 39.886027][ T478] usb 4-1: device descriptor read/64, error -71 [ 39.886752][ T883] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.895516][ T357] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 39.901742][ T883] rust_binder: Read failure Err(EFAULT) in pid:118 [ 39.934588][ T357] usb 3-1: device descriptor read/8, error -71 [ 39.952346][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 39.959078][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.967709][ T63] usb 2-1: config 7 has an invalid interface number: 241 but max is 8 [ 39.976151][ T63] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 9 [ 39.985306][ T63] usb 2-1: config 7 has no interface number 0 [ 39.991476][ T63] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 40.002211][ T63] usb 2-1: config 7 interface 241 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 8 [ 40.012303][ T63] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x86 has an invalid bInterval 144, changing to 11 [ 40.012425][ T478] usb usb4-port1: attempt power cycle [ 40.023930][ T63] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x86 has invalid maxpacket 58007, setting to 1024 [ 40.040542][ T63] usb 2-1: config 7 interface 241 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.041619][ T887] xfrm0: mtu less than device minimum [ 40.053882][ T63] usb 2-1: config 7 interface 241 has no altsetting 0 [ 40.067326][ T63] usb 2-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice=9c.4a [ 40.076878][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.083891][ T357] usb 3-1: device descriptor read/8, error -71 [ 40.084927][ T63] usb 2-1: Product: syz [ 40.095236][ T63] usb 2-1: Manufacturer: syz [ 40.099812][ T63] usb 2-1: SerialNumber: syz [ 40.105228][ T872] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.322403][ T357] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 40.343455][ T357] usb 3-1: device descriptor read/8, error -71 [ 40.362930][ T478] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.372358][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 40.383934][ T478] usb 4-1: device descriptor read/8, error -71 [ 40.448298][ T63] ftdi_sio 2-1:7.241: FTDI USB Serial Device converter detected [ 40.456404][ T63] ftdi_sio ttyUSB0: unknown device type: 0x9c4a [ 40.465881][ T63] usb 2-1: USB disconnect, device number 8 [ 40.472871][ T63] ftdi_sio 2-1:7.241: device disconnected [ 40.474458][ T357] usb 3-1: device descriptor read/8, error -71 [ 40.513457][ T478] usb 4-1: device descriptor read/8, error -71 [ 40.524212][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 40.532862][ T45] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 40.543967][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 40.552066][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.40 [ 40.561214][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.569318][ T45] usb 1-1: Product: syz [ 40.573493][ T45] usb 1-1: Manufacturer: 釠䀞恉઻⦡㘕㛔Ճ弳鑁낹隔孶飄莨賄楆ꂔ簓㍷㱖臯벦㇩縘⽕尊३뗳꣗퍴뜝⤋﩯餋칚䕟ⲅ缍ዷ畷晿瑒웒镻恘暍趁몫슜ﰭ㛴ᘷ絡６掉髵Ტ娖宇ㄐ䯇뚣曎ᨂ崖忐屶ꬳƣ뜶㏨飵梈跈젷䞒剘ᘎ⟴粝〜씨꼉લ֦쿊苓産飉씆服䳳 [ 40.605988][ T45] usb 1-1: SerialNumber: syz [ 40.610885][ T357] usb usb3-port1: unable to enumerate USB device [ 40.618875][ T890] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 40.752479][ T478] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.773361][ T478] usb 4-1: device descriptor read/8, error -71 [ 40.903344][ T478] usb 4-1: device descriptor read/8, error -71 [ 41.012888][ T478] usb usb4-port1: unable to enumerate USB device [ 41.033047][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 41.039123][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 41.048461][ T45] usb 1-1: USB disconnect, device number 10 [ 41.315465][ T911] can0: slcan on ptm0. [ 41.362979][ T910] can0 (unregistered): slcan off ptm0. [ 41.492385][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.547701][ T913] overlayfs: upper fs does not support tmpfile. [ 41.606698][ T914] IPv6: syztnl0: Disabled Multicast RS [ 41.643504][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.653794][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.663651][ T63] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.672907][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.681054][ T63] usb 2-1: SerialNumber: syz [ 41.690999][ T916] binder: Bad value for 'defcontext' [ 41.734016][ T920] kvm: pic: non byte write [ 41.802486][ T925] rust_binder: Error while translating object. [ 41.802544][ T925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 41.808843][ T925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 41.830120][ T927] binder: Binderfs stats mode cannot be changed during a remount [ 41.936055][ T63] usb 2-1: 0:2 : does not exist [ 41.942383][ T63] usb 2-1: USB disconnect, device number 9 [ 41.950179][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.092384][ T478] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.222379][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 42.230009][ T478] usb 4-1: device descriptor read/64, error -71 [ 42.381656][ T295] ------------[ cut here ]------------ [ 42.387257][ T295] WARNING: CPU: 1 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 42.395310][ T295] Modules linked in: [ 42.399307][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 42.412879][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.422974][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 42.427998][ T295] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 98 9a 03 cc e8 92 5a 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 42.447657][ T295] RSP: 0018:ffffc9000b6ffc40 EFLAGS: 00010293 [ 42.453848][ T295] RAX: ffffffff81ed474e RBX: ffff888115adf0c0 RCX: ffff888122324c00 [ 42.461839][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.469880][ T295] RBP: ffffc9000b6ffc68 R08: 0000000000000003 R09: 0000000000000004 [ 42.477899][ T295] R10: dffffc0000000000 R11: fffff520016dff80 R12: dffffc0000000000 [ 42.485906][ T295] R13: 1ffff11022b5be21 R14: ffff888115adf108 R15: 0000000000000000 [ 42.493918][ T295] FS: 0000555576bfb500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.502970][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.509607][ T295] CR2: 000000110c350db6 CR3: 000000012f32e000 CR4: 00000000003526b0 [ 42.517606][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.525612][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.533608][ T295] Call Trace: [ 42.536878][ T295] [ 42.539790][ T295] simple_rmdir+0x153/0x260 [ 42.544307][ T295] vfs_rmdir+0x3dd/0x560 [ 42.548553][ T295] incfs_kill_sb+0x109/0x230 [ 42.553158][ T295] deactivate_locked_super+0xd8/0x2a0 [ 42.558527][ T295] deactivate_super+0xb8/0xe0 [ 42.563233][ T295] cleanup_mnt+0x3f1/0x480 [ 42.567652][ T295] __cleanup_mnt+0x1d/0x40 [ 42.572049][ T295] task_work_run+0x1e0/0x250 [ 42.576657][ T295] ? __cfi_task_work_run+0x10/0x10 [ 42.581765][ T295] ? __x64_sys_umount+0x126/0x170 [ 42.586838][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.592219][ T295] ? __kasan_check_read+0x15/0x20 [ 42.597275][ T295] resume_user_mode_work+0x36/0x50 [ 42.602420][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 42.607888][ T295] do_syscall_64+0x64/0xf0 [ 42.612345][ T295] ? clear_bhb_loop+0x50/0xa0 [ 42.617029][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.622940][ T295] RIP: 0033:0x7f0efc78fc57 [ 42.627361][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.647002][ T295] RSP: 002b:00007ffc4d5e3638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.655476][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0efc78fc57 [ 42.663487][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d5e36f0 [ 42.671455][ T295] RBP: 00007ffc4d5e36f0 R08: 0000000000000000 R09: 0000000000000000 [ 42.679438][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d5e47e0 [ 42.687428][ T295] R13: 00007f0efc810925 R14: 000000000000a28b R15: 00007ffc4d5e58b0 [ 42.695413][ T295] [ 42.698429][ T295] ---[ end trace 0000000000000000 ]--- [ 42.703954][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.706263][ T295] ================================================================== [ 42.717115][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 42.723050][ T45] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 42.723368][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 42.732755][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.740777][ T295] [ 42.740791][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 42.740821][ T295] Tainted: [W]=WARN [ 42.740827][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.740838][ T295] Call Trace: [ 42.740846][ T295] [ 42.740854][ T295] __dump_stack+0x21/0x30 [ 42.740880][ T295] dump_stack_lvl+0x10c/0x190 [ 42.740901][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.740924][ T295] print_report+0x3d/0x70 [ 42.740939][ T295] kasan_report+0x163/0x1a0 [ 42.740966][ T295] ? ihold+0x24/0x70 [ 42.740990][ T295] ? _raw_spin_unlock+0x45/0x60 [ 42.741006][ T295] ? ihold+0x24/0x70 [ 42.741029][ T295] kasan_check_range+0x299/0x2a0 [ 42.741054][ T295] __kasan_check_write+0x18/0x20 [ 42.741074][ T295] ihold+0x24/0x70 [ 42.741097][ T295] vfs_rmdir+0x26a/0x560 [ 42.741121][ T295] incfs_kill_sb+0x109/0x230 [ 42.741141][ T295] deactivate_locked_super+0xd8/0x2a0 [ 42.741160][ T295] deactivate_super+0xb8/0xe0 [ 42.741178][ T295] cleanup_mnt+0x3f1/0x480 [ 42.741203][ T295] __cleanup_mnt+0x1d/0x40 [ 42.741226][ T295] task_work_run+0x1e0/0x250 [ 42.741244][ T295] ? __cfi_task_work_run+0x10/0x10 [ 42.741261][ T295] ? __x64_sys_umount+0x126/0x170 [ 42.741280][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.741300][ T295] ? __kasan_check_read+0x15/0x20 [ 42.741320][ T295] resume_user_mode_work+0x36/0x50 [ 42.741338][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 42.741361][ T295] do_syscall_64+0x64/0xf0 [ 42.741375][ T295] ? clear_bhb_loop+0x50/0xa0 [ 42.741396][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.741415][ T295] RIP: 0033:0x7f0efc78fc57 [ 42.741431][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.741445][ T295] RSP: 002b:00007ffc4d5e3638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.741465][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0efc78fc57 [ 42.741477][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d5e36f0 [ 42.741489][ T295] RBP: 00007ffc4d5e36f0 R08: 0000000000000000 R09: 0000000000000000 [ 42.741501][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d5e47e0 [ 42.741513][ T295] R13: 00007f0efc810925 R14: 000000000000a28b R15: 00007ffc4d5e58b0 [ 42.741529][ T295] [ 42.741535][ T295] ================================================================== [ 42.761883][ T45] usb 3-1: config 0 descriptor?? [ 42.766576][ T295] Disabling lock debugging due to kernel taint [ 42.772368][ T478] usb 4-1: device descriptor read/64, error -71 [ 42.780685][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 42.793490][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 42.793504][ T36] audit: type=1400 audit(2000000005.039:330): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.795454][ T295] #PF: supervisor write access in kernel mode [ 42.795464][ T295] #PF: error_code(0x0002) - not-present page [ 42.795475][ T295] PGD 800000010c7fe067 P4D 800000010c7fe067 PUD 0 [ 42.800788][ T36] audit: type=1400 audit(2000000005.039:331): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.804975][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 42.804996][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 42.805024][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 42.805031][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.810391][ T36] audit: type=1400 audit(2000000005.039:332): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.813384][ T295] RIP: 0010:ihold+0x2a/0x70 [ 42.813415][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 51 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 42.813431][ T295] RSP: 0018:ffffc9000b6ffca0 EFLAGS: 00010246 [ 42.818584][ T36] audit: type=1400 audit(2000000005.039:333): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.822135][ T295] [ 42.822150][ T295] RAX: ffff888122324c00 RBX: 0000000000000000 RCX: ffff888122324c00 [ 42.822166][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.822178][ T295] RBP: ffffc9000b6ffcb0 R08: ffffffff88958947 R09: 1ffffffff112b128 [ 42.827611][ T36] audit: type=1400 audit(2000000005.039:334): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.832003][ T295] R10: dffffc0000000000 R11: fffffbfff112b129 R12: ffff888115adf0cc [ 42.832020][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 42.832031][ T295] FS: 0000555576bfb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.832048][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.836171][ T36] audit: type=1400 audit(2000000005.039:335): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.839960][ T295] CR2: 0000000000000168 CR3: 000000012f32e000 CR4: 00000000003526b0 [ 42.839979][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.839991][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.845269][ T36] audit: type=1400 audit(2000000005.039:336): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.849895][ T295] Call Trace: [ 42.849902][ T295] [ 42.849910][ T295] vfs_rmdir+0x26a/0x560 [ 43.022374][ T478] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 43.028428][ T295] incfs_kill_sb+0x109/0x230 [ 43.028461][ T295] deactivate_locked_super+0xd8/0x2a0 [ 43.028480][ T295] deactivate_super+0xb8/0xe0 [ 43.173731][ T478] usb 4-1: device descriptor read/64, error -71 [ 43.177588][ T295] cleanup_mnt+0x3f1/0x480 [ 43.198761][ T45] cherry 0003:046A:0027.0004: unbalanced collection at end of report description [ 43.200378][ T295] __cleanup_mnt+0x1d/0x40 [ 43.208730][ T45] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22 [ 43.216324][ T295] task_work_run+0x1e0/0x250 [ 43.216351][ T295] ? __cfi_task_work_run+0x10/0x10 [ 43.216366][ T295] ? __x64_sys_umount+0x126/0x170 [ 43.216385][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 43.216403][ T295] ? __kasan_check_read+0x15/0x20 [ 43.435877][ T295] resume_user_mode_work+0x36/0x50 [ 43.440977][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 43.446422][ T295] do_syscall_64+0x64/0xf0 [ 43.450821][ T295] ? clear_bhb_loop+0x50/0xa0 [ 43.455478][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.461357][ T295] RIP: 0033:0x7f0efc78fc57 [ 43.462386][ T478] usb 4-1: device descriptor read/64, error -71 [ 43.465754][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 43.465773][ T295] RSP: 002b:00007ffc4d5e3638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.499983][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0efc78fc57 [ 43.507942][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d5e36f0 [ 43.515895][ T295] RBP: 00007ffc4d5e36f0 R08: 0000000000000000 R09: 0000000000000000 [ 43.523847][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4d5e47e0 [ 43.531800][ T295] R13: 00007f0efc810925 R14: 000000000000a28b R15: 00007ffc4d5e58b0 [ 43.539785][ T295] [ 43.542785][ T295] Modules linked in: [ 43.546669][ T295] CR2: 0000000000000168 [ 43.550794][ T295] ---[ end trace 0000000000000000 ]--- [ 43.556318][ T295] RIP: 0010:ihold+0x2a/0x70 [ 43.560810][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 51 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 43.572460][ T478] usb usb4-port1: attempt power cycle [ 43.580486][ T295] RSP: 0018:ffffc9000b6ffca0 EFLAGS: 00010246 [ 43.580511][ T295] RAX: ffff888122324c00 RBX: 0000000000000000 RCX: ffff888122324c00 [ 43.580525][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.580536][ T295] RBP: ffffc9000b6ffcb0 R08: ffffffff88958947 R09: 1ffffffff112b128 [ 43.615844][ T295] R10: dffffc0000000000 R11: fffffbfff112b129 R12: ffff888115adf0cc [ 43.623798][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 43.631760][ T295] FS: 0000555576bfb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.640704][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.647281][ T295] CR2: 0000000000000168 CR3: 000000012f32e000 CR4: 00000000003526b0 [ 43.655278][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.663324][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.671281][ T295] Kernel panic - not syncing: Fatal exception [ 43.677658][ T295] Kernel Offset: disabled [ 43.681969][ T295] Rebooting in 86400 seconds..